Privacy Policy
Last updated: 2026-10-12
What we collect
- Account data: email, optional full name, optional date of birth, optional gender.
- Health data you provide: symptom descriptions, severity, duration, medical conditions, allergies (all optional, all in your control).
- Usage data: chat messages, analysis history, saved remedies, theme and notification preferences.
How we use it
Your data is used solely to provide MedAssist features to you (analyses, chat, history, saved remedies). We do not sell your data. We do not use your data to train third-party AI models.
Storage and security
Data is stored in a Supabase (Postgres) database with row-level security policies. Authentication tokens are stored in HTTP-only cookies. Passwords are stored using Supabase's bcrypt-based hashing. Network traffic is encrypted via HTTPS.
AI providers
Symptom analyses and chat messages are sent to a third-party AI provider (Groq / LLaMA) to generate responses. Your inputs are processed by that provider under their privacy terms. We do not send your email or account ID with AI requests.
Your rights
- Export: Download all your data as JSON from Settings → Privacy.
- Delete: Delete your account and all associated data from Settings → Privacy.
- Update: Edit your profile data from Profile or Settings.
Cookies
We use only essential cookies required for authentication and your saved theme preference. No third-party analytics or tracking cookies are used.
Children
MedAssist is not intended for users under 16. We do not knowingly collect data from children.
Contact
For privacy questions, contact us at GitHub Issues.